Solution · Multi-agent pipelines
One orchestrator. Dozens of sub-agents. One accountability chain.
A sub-agent runs only inside the access its parent asked for and a person approved, never more than the parent, and stops when its approval ends or its parent stops. Accounts created before this control keep their previous behavior until an admin switches it.
Who this is for
How it works
Delegation with a cryptographic paper trail.
Signed credentials name each sub-agent's parent, a person's approval sets what it may use, and every check reads that approval live.
Subagents inside a tool like Claude Code or Codex are not Eniyan sub-agents: they share their agent's connection and act as that agent.
01
The parent asks for each sub-agent
The orchestrator asks with its own credential, naming the permissions and websites the sub-agent needs. It can ask only for what it holds itself, and payments are never handed down.
02
A person approves it
Every delegation waits for a person in the dashboard, the inbox and email. They approve it for a limited time or as standing, approve less than was asked, or decline it. Nothing runs until they do.
03
Trust is capped and the approval is read live
A sub-agent's trust level cannot exceed the parent's, and its signed credential names its parent. What it may do is not written into that credential: it is the approval itself, read live on every check, never more than the parent can do right now.
04
Cascade suspension enforced automatically
Stop, suspend or retire the parent and all its sub-agents are suspended with it. Sub-agents cannot start sub-agents of their own, so one action covers the whole tree.
Delegation chain
Human operator
Verified · Enhanced
authorizes
Orchestrator agent
Asks before delegating · Strong
delegates once a person approves
Search agent
web search · capped Strong
Files agent
file read · capped Strong
Data agent
data read · capped Strong
Stop the parent and its sub-agents stop at their next call
Built in
Compliance that scales with your pipeline.
Held within the parent
By default on new accounts, a sub-agent can use only what a person approved and what its parent can do right now. Narrow the parent and the sub-agent loses the same access at its next call. No privilege escalation.
Trust level capping
A sub-agent's trust level is capped at its parent's, never inherited. A Strong parent means a Strong maximum for its sub-agents, regardless of their own declaration completeness.
Approvals that end
A temporary approval ends on its own, one asked for during a task ends with the task, and any approval can be revoked at any time. Webhooks report each delegation as it is asked for, decided and ended.
Cascade suspension
Stop, suspend or retire the parent and every sub-agent under it is suspended automatically. One action to shut down a compromised pipeline, no manual cleanup.